Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
File: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft (raw, json)
Hash identifier: P/loScERzGGbsk7U3eAhrp/DLM0TjZ8TPZJe4mu3kj8=
Subject key identifier: 22:74:E2:17:9E:B1:FD:05:4F:94:33:50:30:7D:2C:BE:9D:B8:DA:B7
Authority key identifier: 0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
Certificate issuer: /CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Certificate serial: 019E3071FF7CC580A4B881E976143DBF43F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
Manifest number: 15EA
Signing time: Sat 16 May 2026 11:00:37 +0000
Manifest this update: Sat 16 May 2026 11:00:37 +0000
Manifest next update: Sun 17 May 2026 11:00:37 +0000
Files and hashes: 1: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl (hash: 4ruPIXwpSs63blm3LaaDkNgflY5F4CQ4Sdh4fe/4pGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:71:ff:7c:c5:80:a4:b8:81:e9:76:14:3d:bf:43:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Validity
Not Before: May 16 11:00:37 2026 GMT
Not After : May 17 11:00:37 2026 GMT
Subject: CN=2274e2179eb1fd054f943350307d2cbe9db8dab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:80:a4:f1:b4:35:80:eb:1e:25:6f:40:06:e5:
2f:3d:1c:91:7e:2f:f7:00:21:65:24:f4:fa:03:92:
1c:16:14:53:58:f1:9e:41:db:ac:1e:0b:61:68:42:
5d:8c:5c:09:2f:30:33:b2:da:a7:57:2f:52:98:12:
96:19:bb:65:84:c9:57:4c:8f:04:0e:b3:09:ab:47:
12:61:3f:e3:ed:98:8f:5a:05:39:03:ed:c7:95:60:
bf:0f:a3:89:bc:bb:89:46:18:de:a4:d0:05:07:b1:
19:c4:c2:62:8e:45:d8:e6:60:b0:33:27:cb:a4:7c:
7f:e7:85:03:ed:57:6d:0d:ba:73:4f:e1:ec:e9:5e:
fa:1a:8b:1a:f7:d4:8b:98:e8:a4:85:ea:1f:ee:73:
ec:56:b7:d7:aa:24:fd:d9:19:02:32:2d:bb:ae:00:
96:2a:e6:03:2c:6b:3a:4f:cf:e4:9a:78:1c:7a:02:
0e:3c:42:b5:5f:44:c6:2a:7f:05:8b:65:60:bc:1d:
ae:8d:4d:97:ae:c9:38:f2:3a:10:a8:17:60:16:1c:
c4:d6:d8:a6:db:35:ef:00:05:bd:e2:2b:2d:6f:e3:
db:0a:96:55:fa:77:eb:b2:98:47:67:cf:2d:fe:37:
d3:48:09:91:15:11:91:ff:c9:e2:88:7d:81:ae:a0:
0c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:74:E2:17:9E:B1:FD:05:4F:94:33:50:30:7D:2C:BE:9D:B8:DA:B7
X509v3 Authority Key Identifier:
keyid:0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1d:27:43:95:da:ce:60:52:dd:0a:24:03:76:9e:1a:52:46:
08:f3:49:6c:91:a2:be:db:df:05:34:ab:a8:4e:8b:63:d8:aa:
ec:7e:ac:94:2a:75:85:1d:8e:a7:ef:27:e8:6b:7a:fb:a2:32:
cd:46:af:65:7a:2f:53:dd:e6:15:6f:c8:f7:f2:c2:eb:a0:b2:
99:b9:f1:96:cf:32:d1:b7:81:1b:50:79:74:f6:02:09:46:a8:
47:6f:07:d7:0b:6d:9c:b1:5e:51:ad:eb:1c:28:29:77:6e:f0:
f7:3c:3a:b0:4d:57:04:d6:98:72:10:ed:0e:2b:98:6c:a0:da:
b1:85:85:a0:53:27:0a:d6:55:36:3b:d6:ea:26:e1:40:70:58:
7f:ed:ba:b4:06:6e:6e:75:44:32:6a:38:ba:ff:84:36:b1:ca:
bc:85:ba:39:79:db:22:b3:14:82:74:70:61:9f:c2:e2:01:e2:
21:d5:6d:03:a6:88:dd:39:1e:bb:25:a4:80:59:39:80:bb:89:
7f:0f:9b:53:0a:76:3d:fc:cd:b1:b1:20:57:18:6c:4d:e5:64:
8b:d2:91:49:46:5b:0c:e8:dd:fa:fc:48:7c:a7:ae:95:81:7b:
da:7d:ec:5c:b2:1a:42:e2:ab:de:c4:23:c7:00:a9:de:eb:a5:
64:52:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:03 2026 by rpki-client